Address Space Layout Randomisation (ASLR) is a technology used to help prevent shellcode from being successful. It does this by randomly offsetting the location of modules and certain in-memory structures.
3
votes
2answers
226 views
ASLR and how a program can actually call its functions
I'm studying protection techniques and I've got a doubt about how ASLR works for a program in a Windows environment.
As far as I know ASLR works by randomizing part of the imagebase address when ...
4
votes
1answer
114 views
Do 64-bit applications have any security merits over 32-bit applications?
A particular article from arstechnica.com stated this.
One of these protective measures is called Address Space Layout Randomization, ASLR, and it works by moving DLLs and application memory into ...
5
votes
1answer
279 views
What is HiASLR?
I have been hearing this word the whole day long. Can any one give me a brief intro? How does it differ from ASLR?
9
votes
2answers
883 views
How “leaking pointers” to bypass DEP/ASLR works
I was wondering if anyone could give me some clues on how "leaking pointers" to bypass DEP/ASLR work. I read here:
The only way to reliably bypass DEP and ASLR is through an pointer
leak. This ...
0
votes
2answers
443 views
How to defeat ASLR in linux kernel? [duplicate]
Possible Duplicate:
Stack Overflows - Defeating Canaries, ASLR, DEP, NX
is there anyway to disable ASLR in Linux kernel 2.6.32-71.el6.x86_64, with Apache privileges??
I tried this commands:
...
4
votes
1answer
143 views
What attacks does a W^X policy prevent against?
Write xor Execute (W^X) is a policy that a block (page) of memory cannot be marked as both writeable and executable at the same time.
What attacks does W^X prevent, with and without the following:
...
1
vote
1answer
599 views
Any reasons to why not use randomize_va_space?
I've been looking a bit into kernel options for hardening, and there is one that seems to be a good idea to deploy - randomize_va_space. But before I activate that feature I started a google search, ...
21
votes
2answers
3k views
How do ASLR and DEP work?
How do Address Space Layout Randomisation (ASLR) and Data Execution Prevention (DEP) work, in terms of preventing vulnerabilities from being exploited? Can they be bypassed?
2
votes
1answer
176 views
What to do next for this possible buffer overflow?
I've been instructed to test a few of our newer applications before user release, and managed to find a buffer overflow on one of the fields.
Here is where I've run into a brick wall though, and ...
